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L2: Entry 3 of 3 



File: EPAB 



Sep 4, 2002 



DOCUMENT- IDENTIFIER: EP 1237108 A2 
TITLE: Secure electronic commerce 



Abstract Text (1) : 

CHG DATE=20021002 STATUS=0> Secure transactions are achieved .over a 
public network by using a private network to handle the sensitive 
information of the transaction. When a client requests a product 
from a vendor server over a public network, the vendor server 
not -j f -j es a facilitation server on the public network. This results 
in the client receiving a set of computer readable instructions 
from the facilitation server . The set of instructions provide 
access instructions to a transaction server system on the private 
network so that sensitive transaction information is sent to the 
transaction server system on the private network rather than over-, 
the public Internet. Where the sensitive information is credit card 
information, the transaction server system may obtain authori sati on 
for the transaction from a financial institution and then not i fy 
the vendor accordingly. Where the sensitive information is the 
identity of a user of the client, the transact i o n server may 
selectively authori se the transaction without the vendor being 
apprised of the identity of a user of the client. Secure 
communications may also be achieved by sending sensitive 



communications over the private network . 
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WEST Search History 

DATE: Monday, December 15, 2003 

Set Name Query Hit Count Set Name 

side by side result set 

DB=PGPB; PLUR=YES; OP=ADJ 

L5 13 and 14 12 L5 

(709/217 OR 709/229 OR 709/225 OR 709/227 OR 713/201 OR 
713/200).CCLS. 

(intranets or (virtual$ adj (networks or Ian or wan)) or (privat$ 
L3 adj (networks or Ian or wan))) same server same (authorizS or 5 1 L3 

authorisS or securS or authenticS or confidentialS) same notifS 

DB=-JPAB,EPAB; PLUR=YES; OP=ADJ 

L2 LI same notifS 3 L2 

(intranets or (virtualS adj (networks or Ian or wan)) or (privatS 
LI adj (networks or ian or wan))) same server same (authorizS or 54 LI 

authorisS or securS or authenticS or confidentialS) 

END OF SEARCH HISTORY 
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L5: Entry 7 of 12 



File: PGPB 



Oct 31, 2002 



DOCUMENT- IDENTIFIER: US 20020162027 Al 
TITLE: Secure electronic commerce 



Abstract Paragraph (l) : 

Secure transactions are achieved over a public network by using a 
pr-ivate network to handle the sensitive information of the 
transaction. When a client requests a product from a vendor ae^rver 
over a public network, the vendor sprvRr notifies a facilitation 
server on the public network. This results in the client receiving 
a set of computer readable instructions from the facilitation 
server . The set of instructions provide access instructions to a 
transaction server system on the private nRtwnrk so that sensitive 
transaction information is sent to the transactio n server system on 
the private network rather than over the public Internet. Where the 
sensitive information is credit card information, the transaction 
server system may obtain anthori sat i on for the transaction from a 
financial institution and then noti fy the vendor accordingly. Where 
the sensitive information is the identity of a user of the client, 
the transaction server may selectively author-j se the transaction 
without the vendor being apprised of the identity of a user of the 
client. SecurR communications may also be achieved by sending 
sensitive communications over the private network . 

Current Ufi Cl assi f -i cat i on , US Primar y CT ass/Suhcl ass (1) : 

7i:^/:>ni 

Current US Classification, US Secondary CI ass/Snhcl ass (2) : 
7Q9/:>2'S 



US Secondary C! ass /Suhcl ass (3) 



Current US C1 assi f i cati nn ^ 
709/:?27 

Summary of Invention Paragraph (7) : 

[0006] Secure transactions are achieved over a public network by 
using a private network to handle the sensitive information of the 
transaction. When a client requests a product from a vendor server 
over a public network, the vendor server noti f i ps a facilitation 
servRr on the public network. This results in the client receiving 
a set of computer readable instructions from the facilitation 
server. The set of instructions provide access instructions to a 
transaction server system on the private network so that sensitive 
transaction information is sent to the transaction server system on 
the private network rather than over the public Internet. Secure 
communications may also be achieved by sending sensitive 
communications over the private network . 
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LIO: Entry 3 of 3 File: USPT May 28, 2002 



DOCUMENT- IDENTIFIER: US 6397261 Bl 
TITLE: Secure token-based document server 



Brief Summary Text (10) : 

In accordance with the invention, there is provided a method and 
apparatus therefor, for operating on a network a secure document 
server (or a token-enabled server) . The secure document server 
receives from a holder of a document token a request for a copy of 
a document identified by the document token. The document token 
includes issuer content and a signature from an issuer and holder 
content and a signature from the holder. The secure document server 
locates in the issuer content a document identifier, a hint to a 
public key of the issuer, and a public key of the holder. The 
document identifier specifies where the document is stored on the 
network. In a key list on the secure document server, the server 
locates the public key of the issuer using the hint to the public 
key of the issuer. Subsequently, the server authent-i natf^s thf^ 
iHRufir content of thf^ donumf^nt identifier with the public key of 
the issuer. The server then locates in the holder content of the 
document a time stamp. The time stamp identifies when the holder of 
the document token requested the copy of the document. Using the 
public key of the holder, the server authent n natea the holder 
content of the document identifier. Also, the server verifies that 
the time stamp is within a predetermined window of time relative to 
a current time. Finally, the secure document server issues, to the 
holder of the document identifier, a copy of the document 
identified by the document identifier when the document token is 
authenticated . The authentication process allows the secure 
document server to authenticate a request f or the document 
identified by the document token without prior knowledge of the 
identity of the holder of the document token. 

Detailed Description Text (16) : 

The difference between a token-aware shared document server 134 and 
a token-aware personal document sR-rver IPfi is that the sharpd 
document server 134 is rr^p;^h1 e of ^^uth^nt i rat i ng requests to fetch 
documents i dent i f i Rd in document tokens using many different key 
pairs. In contrast, the personal document server 12 8 may only 
authenticate requests with one or two key pairs, such as a device 
key from the mobile computing device 118 and the personal 
workstation 108. Accordingly, the shared document server 134, 
unlike the personal document server 12 8, is adapted to accommodate 
a number of users operating on Intranet 116. 
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WEST Search History 



DATE: Monday, December 15, 2003 

Set Name Query Hit Count Set Name 

side by side result set 

DB=USPT; PLUR=YES; OP-^ADJ 

L13 112 and 16 0 L13 

L12 ((selects or choos$ or chos$) near2 receivS) and 17 30 LI 2 

LI 1 ((selects or choos$ or chos$) near2 receivS) same 17 0 LI 1 

LIO 18 and 19 3 LIO. 

L9 17 and 16 19 L9 

L7 same (intranetS or (virtualS adj (networks or Ian or wan)) or ^ 
(privatS adj (networks or Ian or wan))) 

(identifS near4 (authorizS or authorisS or securS or authenticS or 
confidentiaiS)) near 12 document 

(709/217 OR 709/229 OR 709/225 OR 709/227 OR 713/201 OR 
713/200)!.CCLS. ^^"^^ 

DB=PGPB; PLUR-YES; OP-ADJ 

L5 13 and 14 12 L5 

(709/217 OR 709/229 OR 709/225 OR 709/227 OR 713/201 OR 
713/200).CCLS. ^^^^ 

(intranets or (virtualS adj (networks or Ian or wan)) or (privatS 
L3 adj (networks or Ian or wan))) same server same (authorizS or 5 1 L3 

authorisS or securS or authenticS or confidentiaiS) same notifS 

DB=JPAB,EPAB; PLUR=YES; OP=ADJ 

L2 LI same notifS 3 L2 

(intranets or (virtualS adj (networks or Ian or wan)) or (privatS 
LI adj (networks or Ian or wan))) same server same (authorizS or 54 LI 

authorisS or securS or authenticS or confidentiaiS) 

END OF SEARCH HISTORY 
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WEST Search History 



DATE: Monday, December 15, 2003 

Set Name Query Hit Count Set Name 

side by side result set 

DB=USPT; PLUR-YES; OP^ADJ 

LIO 18 and 19 3 LIO 

L9 17 and 16 19 L9 

L7 same (intranetS or (virtual$ adj (networks or Ian or wan)) or ^ 
(privatS adj (networks or Ian or wan))) 

(identify near4 (authorizS or authorisS or secur$ or authenticS or 
confidentialS)) near 12 document 

(709/217 OR 709/229 OR 709/225 OR 709/227 OR 713/201 OR ^ , . < 

713/200)!.CCLS. ^^^^ 

DB^PGPB; PLUR-YES; OP=ADJ 

L5 13 and 14 12 L5 

(709/217 OR 709/229 OR 709/225 OR 709/227 OR 713/201 OR 
713/200).CCLS. 

(intranets or (virtualS adj (networks or Ian or wan)) or (privatS 
L3 adj (networks or Ian or wan))) same server same (authorizS or 5 1 L3 

authorisS or securS or authenticS or confidentialS) same notif$ 

DB^JPAB^EPAB; PLUR-^YES; OP=ADJ 

L2 LI same notifS 3 L2 

(intranets or (virtualS adj (networks or Ian or wan)) or (privatS 
LI adj (networks or Ian or wan))) same server same (authorizS or 54 LI 

authorisS or securS or authenticS or confidentialS) 

END OF SEARCH HISTORY 
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